GHSA-x89r-2wjq-mj7x

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-x89r-2wjq-mj7x/GHSA-x89r-2wjq-mj7x.json
Aliases
  • CVE-2005-4703
Published
2022-05-01T02:29:50Z
Modified
2023-09-18T23:51:25Z
Details

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.

References

Affected packages

Maven / org.apache.tomcat:tomcat

Source Details

Package Name
org.apache.tomcat:tomcat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Last affected
4.0.3

Ecosystem specific 

{
    "affected_functions": [
        ""
    ]
}